CVE-2017-3014
HIGHAdobe Acrobat < 11.0.19 - Use After Free
Title source: ruleDescription
Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vulnerability in XML Forms Architecture (XFA) related to reset form functionality. Successful exploitation could lead to arbitrary code execution.
Scores
CVSS v3
7.8
EPSS
0.0146
EPSS Percentile
80.6%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Classification
CWE
CWE-416
Status
draft
Affected Products (6)
adobe/acrobat
< 11.0.19
adobe/acrobat_dc
< 15.006.30280
adobe/acrobat_dc
< 15.023.20070
adobe/acrobat_reader_dc
< 15.006.30280
adobe/acrobat_reader_dc
< 15.023.20070
adobe/reader
< 11.0.19
Timeline
Published
Apr 12, 2017
Tracked Since
Feb 18, 2026